Information-disclosure vulnerability in Apple Remote Desktop| ID: oval:org.secpod.oval:def:10693 | Date: (C)2013-04-08 (M)2021-09-30 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apple Remote Desktop 3.5.2 or 3.6.0 and is prone to information-disclosure vulnerability. A flaw is present in the application, which fails to recognize the "Encrypt all network data" setting during connections to third-party VNC servers. Successful exploitation allows remote attackers to obtain cleartext VNC session content by sniffing the network.
| Platform: |
| Apple Mac OS X 10.8 |
| Apple Mac OS X 10.9 |
| Apple Mac OS X 10.10 |
| Apple Mac OS X Server 10.8 |
| Apple Mac OS X Server 10.9 |
| Apple Mac OS X Server 10.10 |
| Product: |
| Apple Remote Desktop |
